Privacy policy

Last updated: 15 October 2026

This policy explains, in plain words, what personal data this course website collects, why, who we share it with, how long we keep it, and the rights you have. We have written it with India's Digital Personal Data Protection Act, 2023 (the "DPDP Act") and its rules in mind.

1. Who is responsible for your data

Axonova Technologies, Sunderbani, District Rajouri, Jammu and Kashmir 185153, India ("we", "us") decides how your personal data is used on this website. Under the DPDP Act, we are the "Data Fiduciary" and you are the "Data Principal".

Contact for privacy questions: info@axonovatechnologies.com.

2. What we collect, and why

We collect only what we need to run the course. We do not ask for your phone number, address, date of birth, Aadhaar or PAN.

What	When	Why
Your name	When you buy, or when you claim your certificate	To address you in emails, show it on your receipt and print it on your certificate
Your email address	When you buy, log in or join the waitlist	It is your account and your login. We send your login codes, receipt and important course messages to it
Login codes	Each time you ask to log in	We email you a 6-digit code. We store only a scrambled (hashed) copy, which expires after 10 minutes
Order details	When you buy	Order and payment IDs from Razorpay, amount, any coupon code, date and status. To give you access, issue receipts, handle refunds and keep the accounts that tax law requires
Course progress	While you learn	The lessons you mark complete and the last lesson you opened. To show your progress, take you back where you left off, issue your certificate and apply the refund rule
Certificate details	When you claim a certificate	Your name, the certificate ID and the issue date (see section 5)
Security data	When you log in, buy or join the waitlist	Your IP address, the browser and device type your browser reports, and the time. To keep your account secure, limit repeated login attempts and investigate fraud or payment problems
Messages you send us	When you email us	To reply and solve your problem

What we never receive: your card number, CVV, UPI PIN or net-banking password. You pay on Razorpay's checkout, and that information goes directly to Razorpay and your bank. Razorpay may ask for your phone number at checkout for the payment itself; we do not store it.

We do not use your data for advertising, we do not build profiles of you, and we do not sell your personal data.

3. The basis on which we use your data

You give us your details so that we can provide the course you asked for. We use them only for the purposes in section 2, which the DPDP Act allows. Where we rely on your consent, you can withdraw it at any time by emailing us (see section 9). Withdrawing does not affect anything we did before, but we cannot give you course access without an email address to log in with.

We also process some data because the law requires it, for example keeping payment records for tax purposes.

Emails. We send emails you need: login codes, your receipt, and important messages about your purchase, your account or these policies. If you join the waitlist, we email you about the course opening. We will not send you marketing emails unless you have agreed, and any marketing email will have a way to unsubscribe.

We share data only with the service providers we need to run the website. They process it on our behalf ("Data Processors"):

Service	What it does for us	What it receives
Razorpay (Razorpay Software Private Limited, India)	Processes your payment. Under RBI rules, payment data is stored in India	Your name and email, the amount and order details, and the payment details you enter on its checkout
Resend	Delivers our emails. It stores email data in the United States	Your email address, your name and the content of the emails we send you
Hostinger	Hosts the website, database and server files	All the data the website stores

This means some of your data (for example, email data held by Resend) is processed and stored outside India, including in the United States. Indian law allows this unless the Government restricts a country. We choose providers that use reasonable security safeguards and process data only on our instructions.

We may also share data when the law requires it, for example with tax authorities or in response to a valid legal order.

5. Your certificate is public by design

If you claim a certificate, it gets a public web page so that an employer or college can check it is real. Anyone who has the link or the certificate ID can see the name you entered, the certificate ID, the issue date, and the number of lessons and hours in the course. Your email address is not shown. Share the link only with people you want to see it.

6. Cookies and browser storage

A cookie is a small file a website stores in your browser. We use only these:

Name	What it does	How long it lasts
`session`	Keeps you logged in as you move between lessons	30 days, or until you log out
`csrf`	A security check that stops other websites from sending forms in your name	30 days
`flash`	Shows a one-time message, such as "You are logged in"	2 minutes

All three are essential for the website to work, so they cannot be switched off while you use your account.

The ticks you put in a lesson's "Check yourself" boxes are saved only in your own browser (local storage). They are not sent to us.

We do not use advertising, analytics or tracking cookies. When you pay, Razorpay's checkout window opens on our page, and Razorpay may use its own cookies for security and fraud prevention under its own privacy policy.

You can delete cookies in your browser settings at any time. You will then need to log in again.

7. How long we keep data

Data	How long
Account, progress and certificate	As long as your account exists. If you ask us to delete your account, we do so within 30 days, except the records in the next rows that the law requires us to keep
Order and payment records	As long as Indian tax and accounting laws require (currently up to 8 years, longer if a tax proceeding is pending), even if your account is deleted
Login codes	Expire after 10 minutes and are deleted automatically, usually within a few days
Login sessions	Deleted when you log out, or after they expire (30 days)
Records of login attempts (used to block repeated tries)	Deleted automatically after about 2 days
Waitlist email	Until the course opens and we have told you, or until you ask us to remove it, whichever is first
Server and security logs, and records of how your data was processed	One year, the minimum the DPDP Rules require, then deleted, unless we need them longer to investigate a security problem or another law requires it
Emails you send us	As long as needed to resolve your request, and up to 3 years after that in case the same problem comes back

We do not delete inactive accounts automatically. Ask us at any time and we will delete yours.

8. How we protect your data

We use reasonable security safeguards, including: HTTPS encryption for every page; passwordless login, so there is no password to steal; storing only scrambled (hashed) copies of login codes and session tokens; limits on repeated login attempts; and restricted access to the database and admin pages.

No website is perfectly secure. If a personal data breach affects you, we will tell you without delay, along with what happened and what you can do, and we will report it to the Data Protection Board of India and other authorities as the law requires.

9. Your rights

Under the DPDP Act, you have the right to:

Access: ask for a summary of the personal data we hold about you and how we use it, and who we have shared it with.
Correction and completion: ask us to fix data that is wrong or incomplete.
Erasure: ask us to delete your data, unless we must keep it by law.
Withdraw consent: as described in section 3.
Grievance redressal: complain to us and get a response.
Nominate: name another person to exercise your rights if you die or become unable to.

To use any of these rights, email info@axonovatechnologies.com from the email address on your account. We may ask you to confirm the request from that address. We will respond within 30 days.

If you are not satisfied with our response, you can complain to the Data Protection Board of India.

10. Children

The course is meant for adults. You must be 18 or older to buy it yourself. If you are under 18, a parent or legal guardian must buy the course for you and agree to this policy on your behalf. We do not track children or show them targeted advertising. If you believe a child has signed up without a parent's or guardian's agreement, contact us and we will act on it.

11. Changes to this policy

If we change this policy, we will update the date at the top. For important changes, we will email account holders before the change takes effect.

12. Contact and grievance officer

Grievance Officer: Atul Sharma
Email: info@axonovatechnologies.com
Address: Axonova Technologies, Sunderbani, District Rajouri, Jammu and Kashmir 185153, India

We acknowledge complaints within 48 hours and aim to resolve them within 15 days.